REMARKS 

Claims 1-62 were presented for examination and were pending in this application. In 
an Official Action dated November 28, 2005, claims 1-62 were rejected. Applicants thank the 
Examiner for examination of the claims pending in this application and address the 
Examiner's comments below. 

Claims 52-53 have been cancelled. Independent claims 1,16, 34, 37, 50, 51, 54, and 
58 have been amended to more clearly define the claimed invention. Claims 2, 3, 5, 10, 1 1, 
15, 18, 19, 21, 23-26, 28-30, 32, 38, 39, 41, 43-49, 57, 59-62 have been amended for 
consistency with the terminology used in the respective independent claims. No new matter 
has been introduced. 

Based on the above Amendment and the following Remarks, Applicants respectfully 
request that the Examiner reconsider all outstanding rejections, and withdraw them. 

Response to Rejection Under 35 USC 102 

The Examiner has rejected claims 16, 18-20, 23-29, 31-33, 52, 53, and 58-61 under 35 
USC § 102(e) as allegedly being anticipated by Brickelll (U.S. Patent Application Publication 
2002/0147917). Claims 52 and 53 have been cancelled. The rejection of claims 16, 18-20, 
23-29, 31-33, and 58-61 is now traversed. 

Claim 16 as amended recites granting the second user access to the first user's data 
"by providing to the application the first user's authentication credential, wherein the first 
user's authentication credential is not provided to the second user." In contrast, Brickelll 
discloses that "Once authenticated, the server 130 looks up the appropriate value associated 
with the delegate's identity in the table 434, and transmits the secured information E] and the 
value, i.e., Ki >a to the delegate 140." Page 2, paragraph 22. The delegate determines the key K 
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for decrypting the encrypted information Ei from the previously received value Ki, b and Ki, a 
received from the server. Page 2, paragraph 24. Thus, Brickelll does not teach or suggest 
granting the second user access to the first user's data by providing to the application the first 
user's authentication credential. Rather, Brickelll teaches that a delegate can access 
information using the values K^b and Ki, a that are provided to the delegate. 

Claim 58 recites a computer program product having similar features as those recited 
in claim 16. The arguments advanced above with respect to claim 16 apply in equal force to 
claim 58. Thus, the rejection of claim 16 and claim 58 are unsupported by the cited reference 
and should be withdrawn. 

Dependent claims 18-20, 23-29, 31-33, and 59-61 depend from claims 16 and 58 
respectively. In addition, these claims recite additional imitations that also are not disclosed 
by the cited references. Therefore, the rejection of claims 18-20, 23-29, 31-33, and 59-61 
based on Brickelll should be withdrawn. 

Response to Rejections Under 35 USC 103(a) in view of Brickelll 

The Examiner rejects claim 17 under 35 USC § 103(a) as allegedly being unpatentable 
over Brickelll in view of Control-Fl (Control-Fl, "Control-Fl Launches CFlLinve 'Branded, 
Hosted, Rented' eSupport Solution."). The Examiner rejects claims 21 and 22 under 35 USC 
§ 103(a) as allegedly being unpatentable over Brickelll in view of Onishi (U.S. Patent 
Application Publication 2003/0149667). The Examiner rejects claims 30 and 62 under 35 
USC § 103(a) as allegedly being unpatentable over Brickelll in view of Chow (U.S. Patent 
Application Publication 2002/0002678). These rejections are respectfully traversed. 

Claims 17, 21, 22, 30 and 62 depend respectively from claims 16 or 58 discussed 
above. Control-Fl, Onishi and Chow all fail to remedy the deficiencies of Brickelll. None of 
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these references disclose granting the second user access to the first user's data "by providing 
to the application the first user 's authentication credential, wherein the first user 's 
authentication credential is not provided to the second user" Thus, the deficient disclosures 
of these references, considered either alone or in combination thus fail to establish even a 
prima facie basis from which a proper determination of obviousness under 35 U.S.C. § 103(a) 
can be made, because the references do not teach or suggest all of the claim limitations as 
detailed above. 

Response to Rejection Under 35 USC 103(a) in view of Sudia and Zhang 

The Examiner rejected claim 1-3, 5-8, 10-14, 19, 20, 23, 24, 30, 54-57, and 62 under 
35 USC § 103(a) as allegedly being unpatentable over Sudia (U.S. Patent Application 
Publication 2002/0013898) in view of Zhang (Zhang et al., "A Rule-Based Framework for 
Role-Based Delegation"). This rejection is respectfully traversed. 

Claim 1 as amended recites "receiving, from a first user, a message at an 
authentication server, the first user having an authentication credential with respect to a first 
user's account used to interact with the first user's data through an application, the message 
that a second user be granted temporary access to the first user 's data through the 
application. " Sudia discloses a system of delegating a primary user's signing authority to a 
second user. See, p. 15, paragraph 248. Sudia does not disclose or suggest receiving a 
message from a first user at an authentication server as recited in claim 1 . Instead, Sudia 
discloses a primary user that issues a "delegation" or a "substitution" certificate to the second 
user. See, p. 15, paragraphs 248-249. Sudia also does not disclose or suggest a first user's 
account used to interact with the first user's data. Sudia discloses a signing system that allows 
the owner to affix a digital signature to a document. See, e.g., Abstract, p. 2, paragraph 16. 
Claim 1 also recites "granting the second user temporary access to the first user 's data 
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through the application by providing to the application the first user's authentication 
credential " Sudia discloses no such access to the first user's data through the application by 
y providing to the application the first user's authentication credential 

Zhang does not remedy these deficiencies in Sudia. Zhang discloses various roles that 
may be delegated. Zhang does not disclose or suggest the claimed feature of receiving a 
message from a first user at an authentication server. Zhang also does not disclose or suggest 
granting a second user access to the first user's data through the application by providing to 
the application the first user 's authentication credential. 

Thus, the deficient disclosures of Sudia and Zhang, considered either alone or in 
combination thus fail to establish even a prima facie basis from which a proper determination 
of obviousness under 35 U.S.C. § 103(a) can be made, because the references do not teach or 
suggest all of the claim limitations as detailed above. 

Claim 54 recites a computer program product having similar features as those recited 
in claim 1. The arguments advanced above with respect to claim 1 apply in equal force to 
claim 54. Thus, the rejection of claims 1 and 54 are unsupported by the cited reference and 
should be withdrawn. 

Claims 2, 3, 5-8, 10-14, 19, 20, 23, 24, 30, 55-57, and 62 depend from claims 1 and 54 
respectively. In addition, these claims recite additional imitations that also are not disclosed 
by the cited references. Therefore, the rejection of claims 2, 3, 5-8, 10-14, 19, 20, 23, 24, 30, 
55-57, and 62 based on Sudia and Zhang should also be withdrawn. 
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Response to Rejection Under 35 USC 103(a) in view of Sudia and Brickell2 

The Examiner rejected claim 34-40 and 43-51 under 35 USC § 103(a) as allegedly 
being unpatentable over Sudia in view of Brickell2 (U.S. Patent 6,965,881). This rejection is 
respectfully traversed with respect to claims 34-40 and 43-49. 

Claim 34 recites "a resource interface . . . for granting the second user access to the 
first user 's data through the resource interface by providing the first user 's authentication 
credential to the authenticator" Sudia discloses a system of delegating a primary user's 
signing authority to a second user. See, p. 15, paragraph 248. Sudia does not disclose a 
resource interface through which a delegate can access data of the primary user by providing 
the primary user's authentication credential to an authenticator. Instead, Sudia discloses a 
primary user that issues a "delegation" or a "substitution" certificate to the second user. See, 
p. 15, paragraphs 248-249. The delegate attaches the delegation certificate to a document that 
the delegate wishes to sign. The recipient then verifies the delegate's signature and the 
delegate certificate. Paragraph 248. Alternatively, the delegate includes the substitution 
certification in a request to the primary user's card. Paragraph 250. Either way, the delegate 
does not access any data of the primary user through a resource interface. 

Brickell2 does not remedy the deficiencies of Sudia. Brickell2 discloses usage 
reporting of digital credentials. See, Abstract. Brickell2 does not disclose a resource 
interface through which a second user can access data of the first user by providing the 
primary user's authentication credential to an authenticator. Thus, the deficient disclosures of 
Sudia and Brickell2, considered either alone or in combination thus fail to establish even a 
prima facie basis from which a proper determination of obviousness under 35 U.S.C. § 103(a) 
can be made, because the references do not teach or suggest all of the claim limitations as 
detailed above. 
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Claim 37 recites "a resource interface . . .for granting the second user access to the 
first user's data through the resource interface . . . by providing the first user's 
authentication." Claims 50 and 51 recite "a resource interface . . .for granting to a client 
operated by the second user access to the first user 's data through the resource interface . . . 
by providing the first user's authentication credential to the authenticatorT The arguments 
advanced above with respect to claim 34 apply in equal force to claims 37, 50 and 51. Thus, 
the rejection of claims 34, 37, 50 and 51 are unsupported by the cited reference and should be 
withdrawn. 

Claims 35, 36, 38-40, 43-49 depend from claims 34 and 37 respectively. In addition, 
these claims recite additional imitations that also are not disclosed by the cited references. 
Therefore, the rejection of claims 35, 36, 38-40, 43-49 based on Sudia and Zhang should also 
be withdrawn. 

Response to Rejection Under 35 USC 103(a) in view of Sudia, Zhang, and Brickell2 

The Examiner rejected claim 15, 25-29, 32, 33, and 59-61 under 35 USC § 103(a) as 
allegedly being unpatentable over Sudia in view of Zhang and Brickell2. This rejection is 
respectfully traversed. 

Claim 15 depends from claim 1. Applicants have shown claim 1, as amended, to be 
patentable over the combination of Sudia and Zhang above. Brickell2 fails to remedy the 
deficiencies of Sudia and Zhang. For example, Brickell2 does not disclose "granting the 
second user temporary access to the first user's data through the application by providing to 
the application the first user 's authentication credential " Brickell2 merely authenticates 
digital credentials at the request of online service providers. Col. 2, In. 1-18. Thus, the 
deficient disclosures of Sudia, Zhang, and Brickell2, considered either alone or in 
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combination thus fail to establish even a prima facie basis from which a proper determination 
of obviousness under 35 U.S. C. § 103(a) can be made, because the references do not teach or 
suggest all of the claim limitations as detailed above. This rejection should be withdrawn. 

Claims 25-29, 32, 33 depend from claim 1 or claim 16. Claim 16 is patentable over 
the combination of Sudia, Zhang, and Brickell2 for the reasons stated above with reference to 
claim 1. Claims 25-29, 32, and 33 also recite additional imitations that also are not disclosed 
by the cited references. Therefore, the rejection of claims 25-29, 32, and 33 based on Sudia, 
Zhang and Brickell2 should also be withdrawn. 

Claims 59-61 depend from claim 54 or claim 58. Claims 54 and 58 are computer 
program product claims with similar limitations as those in claims 1 and 16 respectively. 
Claims 1 and 16 have been shown above to be patentable over the combination of Sudia, 
Zhang, and Brickell2. Therefore, claims 54 and 58 are likewise patentable over these 
references, as are the claims that depend from them. Therefore, the rejection of claims 59-61 
based on Sudia, Zhang, and Brickell2 should also be withdrawn. 

Response to Rejection Under 35 USC 103(a) in view of Sudia, Zhang, and Control F-l 

The Examiner rejected claim 4 and 9 under 35 USC § 103(a) as allegedly being 
unpatentable over Sudia in view of Zhang and Control F-l: This rejection is respectfully 
traversed. 

Claims 4 and 9 depend from claim 1 . Claim 1 was shown above to be patentable over 
the combination of Sudia and Zhang. Control F-l does not remedy the deficiencies of Sudia 
and Zhang. For example, Control F-l does not disclose "granting the second user temporary 
access to the first user's data through the application by providing to the application the first 
user's authentication credential " as recited in claim 1. Thus, the deficient disclosures of 
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Sudia, Zhang, and Control F-l, considered either alone or in combination thus fail to establish 
even a prima facie basis from which a proper determination of obviousness under 35 U.S.C. § 
103(a) can be made, because the references do not teach or suggest all of the claim limitations 
as detailed above. Thus, claim 1 is patentable over the combination of Sudia, Zhang, and 
Control F-l, as are the claims that depend from claim 1, including claims 4 and 9. This 
rejection should be withdrawn. 

Response to Rejection Under 35 USC 103(a) in view of Sudia, Zhang, and Onishi 

The Examiner rejected claim 21 and 22 under 35 USC § 103(a) as allegedly being 
unpatentable over Sudia in view of Zhang and Onishi. This rejection is respectfully traversed. 

Claims 21 and 22 depend from claims 1 or 16. Claims 1 and 16 have been shown 
above to be patentable over the combination of Sudia and Zhang. Onishi does not remedy the 
deficiencies of Sudia and Zhang. For example, Onishi does not disclose granting the second 
user temporary access to the first user 's data through the application by providing to the 
application the first user s authentication credential Thus, the deficient disclosures of Sudia, 
Zhang, and Onishi, considered either alone or in combination thus fail to establish even a 
prima facie basis from which a proper determination of obviousness under 35 U.S.C. § 103(a) 
can be made, because the references do not teach or suggest all of the claim limitations as «. 
detailed above. Thus, claims 1 and 16 are patentable over the combination of Sudia, Zhang, 
and Control F-l, as are the claims that depend from them, including claims 21 and 22. This 
rejection should be withdrawn. 
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Response to Rejection Under 35 USC 103(a) in view of Sudia, BrickelI2, and Onishi 

The Examiner rejected claim 41 and 42 under 35 USC § 103(a) as allegedly being 
unpatentable over Sudia in view of Brickell2 and Onishi. This rejection is respectfully 
traversed. 

Claims 41 and 42 depend from claim 34 or 37. Claims 34 and 37 have been shown 
above to be patentable over the combination of Sudia and Brickell2. Onishi does not remedy 
the deficiencies of Sudia and Brickell2. For example, Onishi does not disclose does not 
disclose a resource interface through which a second user can access data of the first user by 
providing the primary user's authentication credential to an authenticator. Thus, the deficient 
disclosures of Sudia, Brickell2, and Onishi, considered either alone or in combination thus fail 
to establish even a prima facie basis from which a proper determination of obviousness under 
35 U.S.C. § 103(a) can be made, because the references do not teach or suggest all of the 
claim limitations as detailed above. Thus, claims 34 and 37 are patentable over the 
combination of Sudia, Brickell2, and Onishi, as are the claims that depend from them, 
including claims 41 and 42. This rejection should be withdrawn. 

Conclusion 

Claims 1-51 and 54-62, as presented herein, are patentable over the cited references. 
Applicants request reconsideration of the basis for the rejections of these claims and request 
allowance of them. 
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If the Examiner believes that for any reason direct contact with Applicants' attorney 
would help advance the prosecution of this case, the Examiner is invited to telephone the 
undersigned at the number given below. 



Respectfully submitted, 

William O'Donnell and Daniel Wilks 



Robin W. Reasoner 
Reg. No. 58,257 
Fenwick & West LLP 
801 California Street 
Mountain View, C A 94041 
Phone: (650)335-7172 
Fax: (650)938-5200 



Dated: March 28. 2006 
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